Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
File: 92C0558C1A3B11EC91C03279C4F9AE02.roa (raw, json)
Hash identifier: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=
Subject key identifier: 18:5D:EF:F1:99:8E:39:8F:18:8F:AA:4E:45:0E:53:AF:D0:B8:1E:BA
Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Certificate serial: 047F
Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
Signing time: Tue 29 Oct 2024 00:25:39 +0000
ROA not before: Tue 29 Oct 2024 00:25:39 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 147039
IP address blocks: 103.173.79.0/24 maxlen: 24
2001:df7:9980::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393
Validity
Not Before: Oct 29 00:25:39 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67202b83-f4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:3a:2c:6d:85:2d:27:df:dc:21:e0:05:06:
84:07:75:20:90:8c:cd:a8:54:53:f6:50:5d:98:9e:
b4:dd:d9:75:97:c7:c7:e7:e5:d6:c9:90:cd:5f:fa:
eb:51:75:7d:4d:d1:66:44:7e:21:2f:c5:6a:8e:02:
dd:4b:97:4c:b6:7b:b1:66:0f:1b:e1:f4:ae:cb:92:
e2:28:ff:4e:1e:e1:39:65:10:50:03:58:b2:3e:b6:
11:e0:d8:3c:4f:c6:0a:1a:72:d7:03:dc:dd:4d:ea:
c0:26:bc:9f:35:50:22:a1:af:d7:f0:dd:fc:41:d5:
6c:a1:0e:b9:29:14:28:09:93:4a:72:53:fb:6d:82:
5e:d4:ca:b7:32:1a:95:a7:37:5c:58:76:d3:75:06:
8b:49:1a:b6:00:b0:d5:81:1d:0b:bf:9d:39:df:2b:
f5:81:7c:27:9b:c0:1f:b9:9d:d1:fd:d7:38:3e:de:
14:4d:89:61:8c:39:87:b5:e9:35:16:a0:dc:0f:85:
bd:12:cc:c3:b4:77:e1:25:3a:c3:a5:6d:9e:22:22:
d5:41:35:e2:13:1b:1a:34:85:f7:72:11:76:3a:b2:
4d:5e:4c:bd:49:4e:c2:51:d3:8f:51:45:42:c7:d4:
79:18:e3:63:ee:0e:c7:78:bf:0f:58:57:dc:18:f8:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5D:EF:F1:99:8E:39:8F:18:8F:AA:4E:45:0E:53:AF:D0:B8:1E:BA
X509v3 Authority Key Identifier:
keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.79.0/24
IPv6:
2001:df7:9980::/48
Signature Algorithm: sha256WithRSAEncryption
55:1a:35:2e:37:4f:59:a8:e5:43:86:d7:f1:5a:52:ee:11:34:
52:b9:43:ce:b9:bf:21:82:a0:49:ed:0e:75:17:7d:3e:ba:e2:
ec:9e:c8:3e:fb:2d:ca:01:5f:c9:6e:b7:43:54:5c:a7:b3:6e:
8f:2e:11:b1:b6:d4:74:a7:53:b1:f1:3e:56:3b:3b:13:59:68:
f7:83:a4:2b:c2:07:a9:ad:9c:19:a2:b1:dc:b7:6c:42:21:8e:
14:80:ff:e5:0e:b9:c1:24:1d:95:0a:f2:0a:3e:19:95:8a:f7:
5a:50:8f:79:98:3d:db:09:55:09:fb:14:7f:96:23:d2:18:69:
63:58:c7:e8:73:d1:3f:bc:e9:a8:ee:cd:d5:d5:23:f1:b0:37:
ef:c3:67:5d:11:a5:d6:71:4a:96:ea:98:e5:2c:75:cd:13:34:
81:61:d1:3c:b1:81:dd:e1:c6:a3:e1:02:03:07:02:0c:62:48:
d1:c0:20:f3:d2:2c:81:96:28:d2:cf:ab:d4:0f:9e:f7:61:37:
2a:bf:f6:a6:22:38:ff:c5:c7:b1:80:86:1f:94:78:1e:c6:db:
f1:00:3b:31:6c:23:b2:93:4c:9a:38:af:09:7f:02:8e:cb:27:
3b:e9:67:16:59:4e:fc:75:61:bb:46:73:b4:e3:a1:1f:fe:4e:
8e:01:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:36:34 2025 by rpki-client